Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa
File:                     75c92172-6911-32c6-b7a8-a35de8403ddd.roa (raw, json)
Hash identifier:          06J0asMxvGzYbgQis8367Ar7G8a3SWGLQTwecoKxQyg=
Subject key identifier:   41:78:26:75:5E:73:34:DA:CE:A8:B3:E5:FF:13:02:AD:A6:3E:80:F2
Certificate issuer:       /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f
Certificate serial:       010D0C9F4328584732F0250AB0903CAB3FBE1380
Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa
Signing time:             Fri 13 Sep 2024 09:14:14 +0000
ROA not before:           Fri 13 Sep 2024 09:14:14 +0000
ROA not after:            Thu 12 Dec 2024 10:14:14 +0000
asID:                     397301
IP address blocks:        172.99.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Sep 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:32:f0:25:0a:b0:90:3c:ab:3f:be:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f
        Validity
            Not Before: Sep 13 09:14:14 2024 GMT
            Not After : Dec 12 10:14:14 2024 GMT
        Subject: CN=d2fbb599-b798-4292-b648-53483c533e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:e6:f1:e0:06:c0:8d:de:f2:25:14:f9:4c:
                    0f:0e:de:fe:f2:39:1b:f7:35:e7:f3:9c:a9:05:01:
                    b0:22:0a:f8:21:14:6f:a9:5f:5e:c4:d7:57:6a:09:
                    78:15:35:e8:33:e1:52:2a:be:e1:64:08:36:d4:2f:
                    cf:d4:b9:56:0c:ec:73:a1:78:c9:3c:23:d1:b4:0e:
                    04:72:61:d9:1d:64:1f:80:f3:8d:62:48:17:49:13:
                    24:10:05:92:b0:d4:60:e2:58:13:f7:46:78:ab:87:
                    8f:76:e2:2a:d1:92:e4:85:dd:a9:dd:4b:96:90:d6:
                    5f:df:a2:80:17:83:97:63:dc:74:1f:22:39:a2:47:
                    81:c5:b4:21:48:db:93:ce:28:2e:91:cd:5b:b3:c9:
                    1b:67:41:c1:0e:2e:a1:5f:7e:e3:76:8c:7e:2f:5c:
                    34:7d:60:ef:a1:69:84:8b:4f:a6:b9:4a:ff:fa:78:
                    5f:04:84:e0:37:e0:74:53:ae:4f:f0:a8:ef:98:bd:
                    9c:81:d6:73:38:51:eb:cc:ba:2e:f3:fc:28:79:35:
                    7e:6a:17:18:51:dc:ca:48:0f:8b:3e:fe:a8:af:a1:
                    6b:e4:ef:18:b3:3f:97:7e:fd:87:c0:c8:fa:c0:30:
                    c6:3b:f5:dd:75:ac:8b:bf:b2:11:cc:cc:e5:02:12:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:26:75:5E:73:34:DA:CE:A8:B3:E5:FF:13:02:AD:A6:3E:80:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/75c92172-6911-32c6-b7a8-a35de8403ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl

            X509v3 Authority Key Identifier:
                keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:f8:a1:c7:53:ac:3c:58:d8:a8:1b:54:9e:e2:44:3c:b2:03:
         9b:8d:a6:18:38:52:6e:8b:af:72:04:10:92:d6:a6:89:2d:53:
         d7:f9:10:f5:9a:3d:6c:9d:3c:7f:23:ae:70:36:a6:c1:cb:7e:
         a3:d5:23:ee:d6:2d:47:2a:63:f8:29:d6:1f:b0:52:59:67:7a:
         24:4a:6d:25:74:3e:af:9d:7a:39:0b:33:55:aa:c5:f6:85:96:
         0f:58:81:e9:b2:51:6d:1a:4c:07:c9:b7:79:a3:15:4f:f3:0b:
         dc:f6:fc:df:96:19:0e:ea:2f:f0:04:dc:13:c4:c1:7e:2f:0e:
         65:d2:3a:c7:8e:c1:25:f2:53:e2:53:e0:0d:c7:32:70:6e:46:
         38:76:2e:32:ea:88:76:d6:14:e8:75:92:af:1c:07:d0:88:ef:
         22:c4:c5:0e:26:b8:ce:d1:51:e9:52:5c:2f:a3:48:9c:e6:e5:
         9a:5e:4d:50:ea:21:f7:7d:da:22:8a:f7:c1:57:f3:67:eb:a2:
         1c:4d:3f:84:73:78:77:7a:f7:e5:bf:09:67:3b:e1:6f:10:ef:
         5e:23:e3:cd:d9:61:1f:4e:bb:5e:7e:1b:6f:a1:e1:f0:d3:b1:
         cd:16:8f:41:ba:32:2f:7c:b5:6b:d0:2d:c4:11:80:d9:13:53:
         60:b7:d4:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcy8CUKsJA8qz++E4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3
NzJmMB4XDTI0MDkxMzA5MTQxNFoXDTI0MTIxMjEwMTQxNFowLzEtMCsGA1UEAxMk
ZDJmYmI1OTktYjc5OC00MjkyLWI2NDgtNTM0ODNjNTMzZTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy17m8eAGwI3e8iUU+UwPDt7+8jkb9zXn85yp
BQGwIgr4IRRvqV9exNdXagl4FTXoM+FSKr7hZAg21C/P1LlWDOxzoXjJPCPRtA4E
cmHZHWQfgPONYkgXSRMkEAWSsNRg4lgT90Z4q4ePduIq0ZLkhd2p3UuWkNZf36KA
F4OXY9x0HyI5okeBxbQhSNuTzigukc1bs8kbZ0HBDi6hX37jdox+L1w0fWDvoWmE
i0+muUr/+nhfBITgN+B0U65P8KjvmL2cgdZzOFHrzLou8/woeTV+ahcYUdzKSA+L
Pv6or6Fr5O8Ysz+Xfv2HwMj6wDDGO/XddayLv7IRzMzlAhLmCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEF4JnVeczTazqiz5f8TAq2mPoDyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5
YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvNzVjOTIxNzItNjkxMS0z
MmM2LWI3YTgtYTM1ZGU4NDAzZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2
ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz
NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5
YjRlMzc3MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALH4ocdTrDxY2KgbVJ7iRDyyA5uNphg4Um6Lr3IEEJLWpoktU9f5EPWa
PWydPH8jrnA2psHLfqPVI+7WLUcqY/gp1h+wUllneiRKbSV0Pq+dejkLM1WqxfaF
lg9YgemyUW0aTAfJt3mjFU/zC9z2/N+WGQ7qL/AE3BPEwX4vDmXSOseOwSXyU+JT
4A3HMnBuRjh2LjLqiHbWFOh1kq8cB9CI7yLExQ4muM7RUelSXC+jSJzm5ZpeTVDq
Ifd92iKK98FX82frohxNP4RzeHd69+W/CWc74W8Q714j483ZYR9Ou15+G2+h4fDT
sc0Wj0G6Mi98tWvQLcQRgNkTU2C31Cc=
-----END CERTIFICATE-----
Generated at Fri Sep 20 06:14:29 2024 by rpki-client on console-ams.rpki-client.org